Static task
static1
Behavioral task
behavioral1
Sample
fbc85515a0073838736ed0b72de76e1e_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
fbc85515a0073838736ed0b72de76e1e_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
fbc85515a0073838736ed0b72de76e1e_JaffaCakes118
-
Size
43KB
-
MD5
fbc85515a0073838736ed0b72de76e1e
-
SHA1
e14ebb35557ab26bce28fd5332672806cb32754d
-
SHA256
bf8d664e89db9d02f35ee61abc493da92e8360e983bb702b9e01ae3c30649e4e
-
SHA512
576c4169e27582f886ceb9e5e371d7b7259c96e2af4a18495fddb618f7da8872f1fd15b9c02b12759bdf0b309969ccdb350ab834fe91244e7a6f140b3c705a59
-
SSDEEP
768:x2LlWd8IPUQKSyHAMOUr48DCVU0CHutzawaqgBIVwtxiVZix10ng2fMSlrV:Iw8NDSygvq48DUNTaqgeVwPiG6gZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fbc85515a0073838736ed0b72de76e1e_JaffaCakes118
Files
-
fbc85515a0073838736ed0b72de76e1e_JaffaCakes118.exe windows:5 windows x86 arch:x86
8035d1b99799c38f400040f12b8e72e6
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetForegroundWindow
GetWindowThreadProcessId
kernel32
IsBadReadPtr
Sections
.zazil Size: 36KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.ebktml Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.enmjej Size: 5KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ